CVE-2026-32228
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/04/2026
Last modified:
18/04/2026
Description
UI / API User with asset materialize permission could trigger dags they had no access to.<br />
Users are advised to migrate to Airflow version 3.2.0 that fixes the issue.